hashicorp/consul-k8s v0.44.0

on GitHub

0.44.0 (May 17, 2022)

BREAKING CHANGES:

• Helm
  • Using the Vault integration requires Consul 1.12.0+. [GH-1213], [GH-1218]

IMPROVEMENTS:

• Helm
  • Enable the ability to configure global.consulAPITimeout to configure how long requests to the Consul API will wait to resolve before canceling. The default value is 5 seconds. [GH-1178]

BUG FIXES:

• Security
  • Bump golang.org/x/crypto and golang.org/x/text dependencies to address CVE-2022-27291 and CVE-2021-38561 respectively on both CLI and Control Plane. There's no known exposure within Consul on Kubernetes as the dependencies are not invoked. [GH-1189]
• Control Plane
  • Endpoints Controller queuing up service registrations/deregistrations when request to agent on a terminated pod does not time out. This could result in pods not being registered and service instances not being deregistered. [GH-714]
• Helm
  • Update client-daemonset to include ca-cert volumeMount only when tls is enabled. [GH-1194]
  • Update create-federation-secret-job to look up the automatically generated gossip encryption key by the right name when global.name is unset or set to something other than consul. [GH-1196]
  • Add Admin Partitions support to Sync Catalog (Consul Enterprise only). [GH-1180]
  • Correct webhook-cert-manager-clusterrole to utilize the web-cert-manager podsecuritypolicy rather than connect-injectors when global.enablePodSecurityPolicies is true. [GH-1202]
  • Enable Consul auto-reload-config only when Vault is enabled. [GH-1213]
  • Revert TLS config to be compatible with Consul 1.11. [GH-1218]